Skip to content
Commit 53c50cae authored by Federico Mena Quintero's avatar Federico Mena Quintero
Browse files

Avoid overflow in gint multiplication



In the convolution matrix filter code, we read the orderx and ordery for the convolution
matrix.  However, multiplying them as gints may overflow.

Found by fuzz testing when orderx = ordery = 65536

Fuzz testing kindly provided by Atte Kettunen <attekett@gmail.com>
From librsvg-fuzz case rsvgconvert-060-3ef-705-f72.svg

Signed-off-by: default avatarFederico Mena Quintero <federico@gnome.org>
parent 8c71bac8
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment